Cloud Security Engineer (Azure) - Freelance

Role Overview

We are seeking an experienced Cloud Security Engineer to help strengthen the security posture of enterprise cloud and infrastructure environments. The role focuses on cloud security, governance, vulnerability management, secure configuration management, and security architecture across Azure and hybrid environments.

You will work closely with security, cloud, infrastructure, and business teams to continuously improve security maturity, challenge existing controls, and drive security best practices across the organization.

Key Responsibilities

• Define, assess, and enhance security controls across Azure and hybrid cloud environments.

• Lead vulnerability management activities, including risk assessment, remediation tracking, and reporting.

• Develop, implement, and maintain secure configuration baselines and hardening standards.

• Review infrastructure and cloud changes from a security perspective and perform risk-based assessments.

• Support security audits, compliance initiatives, and governance activities.

• Work with cross-functional teams to improve operational security controls and security maturity.

• Contribute to the evolution of cloud security architecture, governance frameworks, and security policies.

Required Skills & Experience

• Strong experience securing Microsoft Azure environments.

• Solid knowledge of cloud security architecture, governance, and risk management.

• Hands-on experience with vulnerability management and remediation processes.

• Expertise in security hardening, secure configuration management, and CIS benchmark implementation.

• Experience with Microsoft Defender, Defender XDR, Microsoft Sentinel, Qualys (or similar vulnerability management tools), and ServiceNow.

• Scripting and automation skills using PowerShell, Python, and Infrastructure as Code tools such as Terraform.

• Strong understanding of Identity & Access Management, including Entra ID, MFA, Conditional Access, and Privileged Access Management.

• Familiarity with ISO 27001, NIS2, secure-by-design principles, and modern security frameworks.

Nice-to-Have

• Experience with SASE (Secure Access Service Edge).

• Knowledge of Zero Trust Network Access (ZTNA).

• Security architecture experience.

• Cloud governance framework design and implementation.

• Networking and firewall security expertise.